Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.mft
File:                     4UrGEWFN0WXZRVcpbtftRsj8Al8.mft (raw, json)
Hash identifier:          PtOkZACb4zmbgcmgMVkMnhLM8PGxIN0SdOj0JV3AKuU=
Subject key identifier:   FD:01:12:14:92:A4:0F:00:B7:6B:E7:17:A0:D2:38:11:3E:39:CB:A4
Authority key identifier: E1:4A:C6:11:61:4D:D1:65:D9:45:57:29:6E:D7:ED:46:C8:FC:02:5F
Certificate issuer:       /CN=e14ac611614dd165d94557296ed7ed46c8fc025f
Certificate serial:       01A06D94CBF4E28A17E48F7B95090A2CA981
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.mft
Manifest number:          1A68
Signing time:             Fri 04 Sep 2026 18:01:03 +0000
Manifest this update:     Fri 04 Sep 2026 18:01:03 +0000
Manifest next update:     Sat 05 Sep 2026 18:01:03 +0000
Files and hashes:         1: 253R_HjPAe_ULUSoVVCZut_DWoY.roa (hash: D4Z9WrfO5QDHXjS9ZWgcaTJ1VBuEVEWpyCuirpjL6iQ=)
                          2: 4Amcw_pQnCgUTmmioG8dHpbahno.roa (hash: 92MW6tWWkm7QMlJBGqIiuLCgDXvyb+/reqKAYQ6ekAE=)
                          3: 4UrGEWFN0WXZRVcpbtftRsj8Al8.crl (hash: w3bugTsCmgiWqt/6MlqyeDVn4LTVBh56wR65GSww/kg=)
                          4: 4wWLZvDCm_Fs8RXrsh4_nX1EMD8.roa (hash: Ps9U40mkOfvPLjiWBVogaam3tFF1PxDWGlfCu6BeeCI=)
                          5: 7w4SlqD5_TJRCUYNtP45pq1RdHc.roa (hash: x5KSqzcfRNfCh39tqIYQzi+K7RIdwi2UYjNzfLXTpBE=)
                          6: Mqfw0R-H8vCy0F0kf3ENii9rv5c.roa (hash: yVvI0HdEf/H1QrUvDUpGVPHK9JSyS/y9MuhDAFTD8KE=)
                          7: NRnc0MiLNgbuvfsNBN_chXpyQsY.roa (hash: C5qgrl3mdnbFvtHeaqRaus49s6OOOYlaRV1VkekoU7w=)
                          8: NTv7LQAS_LwWFXpfT4pp1pRzpUo.roa (hash: 6Zx0et5KoYqA0nctYCmbK2vATQghjQgESCCV6+X9DFg=)
                          9: NWRZ17VNSXk0NhcxLsdmMsWDMIw.roa (hash: p8n/nJxdfNWfTunhQM0WRuxDSZ2e2b9eRlp4eM3QJQM=)
                          10: Oj1ja8N0oxGQiS2Wy5Ssws_LwJE.roa (hash: 8Nzr/97yM1ZdxlCxAyp0o5DzDkLxP1yuux0LBIokMaw=)
                          11: TvvdgghGK7jE5Wdfke5NcSe8W10.roa (hash: jzahL28Bl93klMAzOc6I83k1Jer8sn+vJHe5tMFdTO4=)
                          12: hHyrrGpim5kmp-rDBaJEUdz4XqI.roa (hash: IRiXUvYvmGRpX+j7hL6X93Z7tjebREZx4+/xbHMKXyU=)
                          13: irISjxv6hlEOs-X4Vplb5dPSU00.roa (hash: K/EihhYKr9R9rdpNfRGGLbcShi2prhZgj9Ka7TW/Gvs=)
                          14: k0z7MDRM9uoQRi5FCpwKZccILJg.roa (hash: dqUt+iofpv1ARMjRtWzMx/LnghSIzAFrMCJ6o7uWMng=)
                          15: kI6qZM_ZaitHrWvGolHhHlDVsrQ.roa (hash: Q3M/OMYn5lm9sKUydcSkDpIKl2s8dMnBBJUvs2+PkIA=)
                          16: kzC9EFyelmmomZF_e2XmyJabbWQ.roa (hash: oXxZIdOtBxJCe3M9KeLiBSELU0JOusil+zniChOYVuA=)
                          17: ovrVbVB-z8m1_IVOS4X2Q8DgTyw.roa (hash: LVLa9mYv21IVSn6z3AQa9diqzTrskMXXMQqtkiGSjNo=)
                          18: pCVE5lGD8Vy-ElskGtB4I6sSAjg.roa (hash: eZJlHsrZQ1146ReM9KzwDX7BATtaYNhY9J9MSAdbqxA=)
                          19: s2sqMucOv1FfQhEnviHe_Vm5xTs.roa (hash: 0WYejSWLXZino5j5/86RMZezTV6CmxWNOw+0wJcC1wo=)
                          20: uwfODHuSXZ-A23Wr5tmyEG0mjkI.roa (hash: wBzrRXxWTC037AZARRRefO3kxnGzL7xL06CRAA2tkOQ=)
                          21: vxK22FrQeol1z1T5kocbd4vcApY.roa (hash: N3qYiB5IYfSxPtYJirle9FvfdxcaVmwY/ECfel7WScI=)
                          22: xRqWzAI7d84_wxUFp0hDIyK_Ojo.roa (hash: GIOz+A10HOs65oGunFzUyPhZsBMSo2WwZBTkg6MNHAI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Sep 2026 16:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:6d:94:cb:f4:e2:8a:17:e4:8f:7b:95:09:0a:2c:a9:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e14ac611614dd165d94557296ed7ed46c8fc025f
        Validity
            Not Before: Sep  4 18:01:03 2026 GMT
            Not After : Sep  5 18:01:03 2026 GMT
        Subject: CN=fd01121492a40f00b76be717a0d238113e39cba4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:6e:b4:33:a4:d3:72:4d:15:78:49:d9:ed:97:
                    94:dd:8f:13:1d:40:0d:71:07:c5:ac:4a:6d:61:71:
                    13:c6:54:d4:fc:d0:b6:57:64:12:ee:e9:09:06:94:
                    1e:84:ad:41:42:6b:6e:e9:9b:5d:d2:28:95:e9:c4:
                    5d:29:e1:6c:0e:c1:67:e7:09:55:80:13:5c:95:d5:
                    fd:11:4d:fb:6e:da:63:2f:bd:20:78:6c:b5:7c:00:
                    91:8e:08:a2:8e:d7:64:61:d9:08:60:eb:07:d5:69:
                    1b:3f:c0:18:8b:30:80:c0:ca:3e:83:dd:48:9b:ed:
                    fa:9f:6f:74:84:94:d8:91:97:f0:24:cd:4c:88:eb:
                    44:ed:5d:a5:d6:fa:0d:df:0d:11:96:dc:47:c2:f9:
                    01:13:da:d3:de:e4:4a:47:71:c7:0e:d1:83:80:01:
                    cf:d9:45:11:c9:17:85:f5:f6:d9:87:81:e7:04:c0:
                    85:5b:2c:00:97:4f:e5:71:95:4f:f7:97:71:35:1c:
                    58:56:75:f8:f0:2b:b7:b5:d5:f8:fb:5d:4f:a0:a7:
                    29:64:5d:b4:13:5d:61:87:1c:88:dd:d6:9c:5b:8c:
                    15:90:05:31:83:13:c6:aa:74:55:38:31:8f:a6:fe:
                    65:b4:50:46:de:29:7c:11:72:f9:37:82:bf:1c:01:
                    a8:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:01:12:14:92:A4:0F:00:B7:6B:E7:17:A0:D2:38:11:3E:39:CB:A4
            X509v3 Authority Key Identifier:
                keyid:E1:4A:C6:11:61:4D:D1:65:D9:45:57:29:6E:D7:ED:46:C8:FC:02:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:66:6d:be:2f:c8:22:8a:23:32:0d:cd:11:82:1b:31:25:c8:
         fe:3f:96:1d:45:f2:32:ac:c0:33:33:82:70:9b:79:3e:0c:1b:
         fd:83:a1:34:4a:7d:87:be:06:08:ca:e0:22:1f:7d:26:9f:05:
         de:33:ff:3e:12:18:e2:c2:7b:d1:df:be:72:95:6b:7b:86:36:
         52:1d:91:1f:3f:8c:ba:70:50:eb:c0:71:c2:12:c1:3f:f1:ff:
         65:94:58:92:c0:6c:39:a6:04:50:eb:39:db:38:53:90:04:b9:
         03:40:fa:ce:34:9e:88:20:e6:4f:40:81:3c:16:e6:6c:39:68:
         3f:0c:35:76:e8:cb:09:eb:29:13:2c:c6:b4:15:16:d0:f0:02:
         cf:be:35:f0:e5:66:ec:4e:e1:b1:2d:80:e7:a1:07:2a:4f:49:
         16:a7:f8:d5:4e:3a:e4:5c:02:09:50:0a:be:d1:fa:7d:65:f2:
         07:01:df:0f:3e:bd:d1:91:db:19:39:68:0b:b1:13:34:23:31:
         de:61:7e:d4:97:c9:57:27:3a:69:c9:f7:d7:f6:c8:b3:67:6c:
         d7:8b:36:f3:8a:df:ec:e4:42:d1:d7:00:5a:61:6f:46:3b:01:
         14:2b:b0:27:99:80:27:e3:9a:f8:46:b1:2e:34:46:70:30:2e:
         74:99:70:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:59:52 2026 by rpki-client